Does Webull have two-factor authentication?

Yes. Webull says "Two-Factor Authentication (2FA) adds an extra layer of security for your account by requiring a verification code sent to your registered phone number when you log in from a new or unrecognized device." It adds "After you successfully complete 2FA on a device, it becomes a trusted device, allowing quicker future logins without repeating the verification step" (Webull: Two-Factor Authentication, checked Oct 22, 2026). We did not find another US sign-in verification method, other than a security question if your phone number isn't working (Webull: Updating Login Email and Phone, checked Oct 22, 2026). Not yet confirmed by the firm.

Does Webull have passkeys?

Not documented for US accounts. Webull's US help pages don't mention passkeys (Webull: Account Login and Security, checked Oct 22, 2026). Webull's Australian help center has a passkey setup page for accounts there (Webull Australia: How do I set up Passkeys?, checked Oct 22, 2026), but that page doesn't cover US accounts. Not yet confirmed by the firm.

Does Webull support Google Authenticator?

Not documented. We did not find an authenticator app or an app login approval in Webull's US help pages. Webull's Securing Your Account page says that when you sign in from a new device, you'll enter your password and "a verification code sent to a trusted device," but it doesn't say how the code arrives (Webull: Securing Your Account, checked Oct 22, 2026). Not yet confirmed by the firm.

Does Webull have a money transfer lock?

Yes, for ACATS transfers to another brokerage. Webull says "The ACATS transfer lock helps protect your account by preventing outbound ACATS transfers to another brokerage firm. The feature is available at no cost and can be turned on or off through your security settings." Webull also says "The lock only applies to outbound ACATS transfers," and that ACH, debit card and wire transfers keep working while it's on (Webull: ACATS Transfer Lock, checked Oct 22, 2026).

Does Webull have a fraud guarantee?

Not documented. We did not find a written guarantee to reimburse losses from unauthorized activity in the Account Login and Security articles of Webull's US help center (Webull: Securing Your Account, checked Oct 22, 2026).

Webull account security: two-factor authentication, passkeys, transfer lock and guarantee

Checked Oct 22, 2026

This page covers Webull's US accounts, using the help center on webull.com. Webull's sites for other countries describe their own accounts, and we don't score them here.

Quick answers

Does Webull have two-factor authentication? Yes. Webull says "Two-Factor Authentication (2FA) adds an extra layer of security for your account by requiring a verification code sent to your registered phone number when you log in from a new or unrecognized device." It adds "After you successfully complete 2FA on a device, it becomes a trusted device, allowing quicker future logins without repeating the verification step" (Webull: Two-Factor Authentication, checked Oct 22, 2026). We did not find another US sign-in verification method, other than a security question if your phone number isn't working (Webull: Updating Login Email and Phone, checked Oct 22, 2026). Not yet confirmed by the firm.
Does Webull have passkeys? Not documented for US accounts. Webull's US help pages don't mention passkeys (Webull: Account Login and Security, checked Oct 22, 2026). Webull's Australian help center has a passkey setup page for accounts there (Webull Australia: How do I set up Passkeys?, checked Oct 22, 2026), but that page doesn't cover US accounts. Not yet confirmed by the firm.
Does Webull support Google Authenticator? Not documented. We did not find an authenticator app or an app login approval in Webull's US help pages. Webull's Securing Your Account page says that when you sign in from a new device, you'll enter your password and "a verification code sent to a trusted device," but it doesn't say how the code arrives (Webull: Securing Your Account, checked Oct 22, 2026). Not yet confirmed by the firm.
Does Webull have a money transfer lock? Yes, for ACATS transfers to another brokerage. Webull says "The ACATS transfer lock helps protect your account by preventing outbound ACATS transfers to another brokerage firm. The feature is available at no cost and can be turned on or off through your security settings." Webull also says "The lock only applies to outbound ACATS transfers," and that ACH, debit card and wire transfers keep working while it's on (Webull: ACATS Transfer Lock, checked Oct 22, 2026).
Does Webull have a fraud guarantee? Not documented. We did not find a written guarantee to reimburse losses from unauthorized activity in the Account Login and Security articles of Webull's US help center (Webull: Securing Your Account, checked Oct 22, 2026).

All eight protections we track

Protection	Status	What Webull's docs say	Source
Passkeys	Not documented	Webull's US help pages don't mention passkeys. Webull's Australian site has a passkey page for accounts there, which we don't count for US accounts. Not yet confirmed by the firm.	Account Login and Security
Authenticator app or app approval	Not documented	We did not find an authenticator app or app login approval. One page says a code is "sent to a trusted device" but doesn't say how it arrives. Not yet confirmed by the firm.	Two-Factor Authentication; Securing Your Account
Hardware security key	Not documented	We did not find FIDO or passkey security keys in Webull's US Account Login and Security articles. Not yet confirmed by the firm.	Account Login and Security
Code-generating key fob	Not documented	We did not find a physical token that shows a code.	Account Login and Security
Text message the only option?	Offered	Webull's US help pages describe 2FA as "a verification code sent to your registered phone number," and we found no other US sign-in method. If your phone number isn't working, Webull's login help says you can "Answer your security question and log in." Offered here means text message is the only documented option, not that Webull has confirmed there are no others. Not yet confirmed by the firm.	Two-Factor Authentication; Updating Login Email and Phone
Transfer lock	Offered	Free, self-service, outbound ACATS only. It doesn't block ACH, debit card or wire transfers.	ACATS Transfer Lock
Phone PIN or verbal password	Not documented	We did not find a phone PIN or verbal password. Webull says "You can set a unique password for trading to prevent unauthorized transactions," which is for trading, not phone support. Webull also has security questions, which we don't count here.	Securing Your Account; Managing Security Questions
Written fraud guarantee	Not documented	We did not find a reimbursement guarantee in the Account Login and Security articles of Webull's US help center.	Securing Your Account

How to turn it on

We list a step only where Webull's own page gives it (checked Oct 22, 2026).

ACATS transfer lock, from Webull: ACATS Transfer Lock: - In the mobile app:
1. Select Menu then Settings.
2. Select Account Status.
3. Enable or disable the lock next to Transfer Securities.
4. Click the profile icon (top right).
5. Select My Account then Manage My Account.
6. Select View Details next to Account Status.
7. Enable or disable the lock next to Transfer Securities.
- On the website: Webull says "identity verification may be completed through SMS when disabling the lock," so keep the phone number on your account up to date. Webull also says "Retirement accounts pending full distribution are not eligible," "Margin accounts with an open ACATS request are not eligible," and "Advisors cannot manage lock settings on managed accounts."
Review your trusted devices, from Webull: Two-Factor Authentication: - In the mobile app: tap Menu. Under Shortcuts, tap Settings, then Account & Security. Select Two-Factor Authentication. - In the desktop app: go to Settings, then Account & Security. Select Account Security.
Two-factor authentication: Webull's US help pages don't give steps for turning two-factor authentication on or off.
Trading password: Webull's Securing Your Account page says you can set one, but it doesn't list the steps.
Passkeys, authenticator apps and security keys: we did not find any of these in Webull's US help pages, so there are no US steps to list. Not yet confirmed by the firm.

What the statuses mean

Offered: Webull's own documentation describes the feature. For "Text message the only option?", Offered means text message is the only sign-in verification method Webull documents.
Not offered: Webull's documentation says it isn't available, or lists its options in a way that clearly leaves it out.
Not documented: we could not find the feature in Webull's public materials. It may still exist.

Features change, so check with Webull before relying on any detail. This page is general education, not financial advice.

Think we got it wrong? Tell us.

Sources

Webull: Two-Factor Authentication, checked Oct 22, 2026
Webull: Updating Login Email and Phone, checked Oct 22, 2026
Webull: Account Login and Security, checked Oct 22, 2026
Webull Australia: How do I set up Passkeys?, checked Oct 22, 2026
Webull: Securing Your Account, checked Oct 22, 2026
Webull: ACATS Transfer Lock, checked Oct 22, 2026
Managing Security Questions, checked Oct 22, 2026

More: Cyber hub · How we score account protections